From owner-svn-doc-head@freebsd.org Sun Oct 18 02:53:03 2015 Return-Path: Delivered-To: svn-doc-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E689EA10456; Sun, 18 Oct 2015 02:53:02 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id BB450F80; Sun, 18 Oct 2015 02:53:02 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id t9I2r1BV088244; Sun, 18 Oct 2015 02:53:01 GMT (envelope-from bjk@FreeBSD.org) Received: (from bjk@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id t9I2r1pY088243; Sun, 18 Oct 2015 02:53:01 GMT (envelope-from bjk@FreeBSD.org) Message-Id: <201510180253.t9I2r1pY088243@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: bjk set sender to bjk@FreeBSD.org using -f From: Benjamin Kaduk Date: Sun, 18 Oct 2015 02:53:01 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r47614 - head/en_US.ISO8859-1/htdocs/news/status X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: SVN commit messages for the doc tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Oct 2015 02:53:03 -0000 Author: bjk Date: Sun Oct 18 02:53:01 2015 New Revision: 47614 URL: https://svnweb.freebsd.org/changeset/doc/47614 Log: Add CloudABI report from ed Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2015-07-2015-09.xml Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2015-07-2015-09.xml ============================================================================== --- head/en_US.ISO8859-1/htdocs/news/status/report-2015-07-2015-09.xml Sun Oct 18 02:29:35 2015 (r47613) +++ head/en_US.ISO8859-1/htdocs/news/status/report-2015-07-2015-09.xml Sun Oct 18 02:53:01 2015 (r47614) @@ -2819,4 +2819,81 @@ + + CloudABI: Pure Capabilities Runtime Environment + + + + + Ed + Schouten + + ed@FreeBSD.org + + + + + CloudABI project + page. + CloudABI Ports + Collection. + CloudABI + presentation at FrOSCon. + + + +

CloudABI is a POSIX-like runtime environment that uses Capsicum + as its sole access control mechanism. CloudABI allows you to + develop software that is better hardened against security + vulnerabilities, is easier to test, and is easier to migrate + across systems.

+ +

As of August, all of the kernel modifications that are needed to + run CloudABI programs have been integrated into &os; head. Once + you load the cloudabi64 kernel module, you can + either run CloudABI programs directly from the shell or by + using the cloudabi-run tool + (sysutils/cloudabi-utils). The latter allows you to + inject sockets, files, and directories into the launched + program in a more structured way.

+ +

In the meantime, work has started on developing a Ports Collection + that contains cross-compiled utilities and libraries for CloudABI. + The intent is that this framework generates native packages for a + number of operating systems, making it possible to develop + CloudABI applications on any operating system, regardless of + whether that operating system actually supports CloudABI.

+ +

If you are interested in CloudABI, be sure to go to the project + page on GitHub, watch recordings of talks at conferences or wait + for the upcoming edition of the FreeBSD Journal, which will + feature an article on CloudABI.

+ + + + Nuxi, the Netherlands + + + + +

CloudABI is currently only available for amd64. It would + make sense to port CloudABI to additional architectures (e.g., + aarch64).

+ + + +

Support for CloudABI has only been integrated into &os;. + If we manage to upstream support for CloudABI into other operating + systems, it should be possible to run the same binary on multiple + operating systems, without recompilation.

+ + + +

The CloudABI Ports Collection currently only has 60 packages. + Though these packages already allow you to build some interesting + software, we're always interested in expanding.

+ + + +